Author Topic: Remote Networks not working 21.7.2 (Read 3572 times)

chrisc543 · « **on:** October 18, 2021, 10:17:38 pm »

Hello,

Upgraded firewall from older version 20 to 21.7.2 and now under openvpn server configuration the remote networks are not injecting route into client.

I have the OpenVPN IP range in on both sides of my tunnel. Found multiple articles discuussing CSC option overrides, tried that as well but not working either. Not sure why the remote networks doesnt work anymore when we want remote access openvpn clients to reach network in site to site ipsec configuration.

Tried to diagnose and having hard time determining where to run packet capture in opnsense.

Relatively new to opnsense/pfsense but not networking.

Thanks,
Chris

mimugmail · « **Reply #1 on:** October 19, 2021, 08:05:35 am »

Did you remove spaces in networks?

chrisc543 · « **Reply #2 on:** October 25, 2021, 09:32:44 pm »

I never had spaces. I tried to delete save and re-enter just to make sure it didnt have spaces and still doesn't work. Remote network is never put into routing table on client.

mimugmail · « **Reply #3 on:** October 26, 2021, 12:55:05 pm »

Screenshots of server config and CSO please

chrisc543 · « **Reply #4 on:** October 26, 2021, 06:50:20 pm »

They are attached.

mimugmail · « **Reply #5 on:** October 26, 2021, 07:34:51 pm »

If you use certificate you need a CSC pointing to Common Name with the remote Network to set proper route

chrisc543 · « **Reply #6 on:** October 26, 2021, 08:08:23 pm »

Where do we setup CSC? Is that something different than CSO?

I tried adding CSO with common name of certificate of user and server and neither worked. Should it be the common name of server or username in certificate?

Thanks for help!

mimugmail · « **Reply #7 on:** October 27, 2021, 03:31:28 pm »

Common name of the certificate

chrisc543 · « **Reply #8 on:** October 27, 2021, 08:26:18 pm »

No change in behavior when i have CSO defined with common name of vpn.domain.com (certificate name). No route for remote network is added to the table on the PC.

mimugmail · « **Reply #9 on:** October 27, 2021, 09:42:54 pm »

No, go to Connection Status, check the name of the client and use this as common name

chrisc543 · « **Reply #10 on:** November 18, 2021, 10:07:16 pm »

No change when using username either in CSO.

Is there documentation of best way to setup? I will delete and start all over. not sure why it didn't work after upgrade but was working before.

Thanks,
Chris

chrisc543 · « **Reply #11 on:** December 01, 2021, 09:25:25 pm »

Any other ideas or how I can setup so that I can have VPN that connects with AD user credentials and remote networks functions? not sure why it used to work on old version and now doesnt any longer. I never had CSO defined in old version.

mimugmail · « **Reply #12 on:** December 02, 2021, 07:19:46 am »

Please post screenhots of server and one CSO

Author Topic: Remote Networks not working 21.7.2 (Read 3572 times)

chrisc543

Remote Networks not working 21.7.2

mimugmail

Re: Remote Networks not working 21.7.2

chrisc543

Re: Remote Networks not working 21.7.2

mimugmail

Re: Remote Networks not working 21.7.2

chrisc543

Re: Remote Networks not working 21.7.2

mimugmail

Re: Remote Networks not working 21.7.2

chrisc543

Re: Remote Networks not working 21.7.2

mimugmail

Re: Remote Networks not working 21.7.2

chrisc543

Re: Remote Networks not working 21.7.2

mimugmail

Re: Remote Networks not working 21.7.2

chrisc543

Re: Remote Networks not working 21.7.2

chrisc543

Re: Remote Networks not working 21.7.2

mimugmail

Re: Remote Networks not working 21.7.2